Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d278db2f8a08c0668cc12826e3616e165022b152.cer
File:                     d278db2f8a08c0668cc12826e3616e165022b152.cer (raw, json)
Hash identifier:          tjfL5Vv3QFXCx1q2F7COKzbtNVevMDS27O2OQ2m2y+8=
Subject key identifier:   1B:91:56:5A:01:39:F6:18:43:78:BB:50:30:E7:36:E7:E9:35:D1:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E91F2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b0d14f0-e0de-452d-890e-08ca85793858/d278db2f8a08c0668cc12826e3616e165022b152.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b0d14f0-e0de-452d-890e-08ca85793858/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Sep 2020 15:29:47 +0000
Certificate not after:    Sun 09 Jun 2024 18:34:10 +0000
Subordinate resources:    AS: 264752
                          IP: 168.195.36.0/22
                          IP: 2803:9f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15277869 (0xe91f2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 15:29:47 2020 GMT
            Not After : Jun  9 18:34:10 2024 GMT
        Subject: CN=d278db2f8a08c0668cc12826e3616e165022b152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:8e:3c:ab:65:15:17:bc:56:fd:a5:40:af:
                    d2:e7:90:51:a4:0d:00:81:5c:a8:89:31:6f:fb:60:
                    a3:d7:8b:56:18:6c:12:64:44:e4:aa:36:c9:e0:fe:
                    66:ea:ce:48:11:93:7c:68:63:00:89:74:81:38:07:
                    d5:a8:2c:9b:e0:0f:ae:e3:28:5e:4f:be:04:7e:79:
                    33:66:bb:ab:dc:93:7e:0c:54:ed:9f:c2:11:e9:ee:
                    bd:35:16:34:0b:e5:c4:03:98:3d:43:fa:39:14:83:
                    b0:8e:ae:16:48:c4:42:ee:19:41:2b:00:7a:fd:27:
                    a3:ef:70:d5:f5:ed:8c:d4:22:61:4f:44:b0:c0:2c:
                    ea:5d:9e:42:cb:a6:81:2c:5b:d6:d2:e1:69:a0:35:
                    32:51:67:cb:ba:34:4d:b7:a6:4e:97:af:84:32:5b:
                    4a:3f:24:ab:e1:82:f8:d2:1c:67:d0:70:95:bd:b2:
                    be:a7:7d:f4:18:ad:f0:e1:ed:74:84:5b:c7:06:f9:
                    d6:62:cd:6b:c7:c1:d9:9e:a3:72:06:f2:45:44:03:
                    53:64:a5:39:99:d0:29:c4:c5:8b:f3:15:d6:18:ad:
                    4f:cd:24:f3:e7:62:32:48:18:20:b2:0b:7a:ff:6a:
                    7f:b7:f6:f0:ef:0f:01:04:7c:a7:8d:bc:ff:14:77:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:91:56:5A:01:39:F6:18:43:78:BB:50:30:E7:36:E7:E9:35:D1:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0d14f0-e0de-452d-890e-08ca85793858/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b0d14f0-e0de-452d-890e-08ca85793858/d278db2f8a08c0668cc12826e3616e165022b152.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.36.0/22
                IPv6:
                  2803:9f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264752

    Signature Algorithm: sha256WithRSAEncryption
         a7:e7:af:68:c9:f7:c0:2b:bb:e0:67:7f:88:a7:a0:23:a3:92:
         7b:61:7c:45:4d:ef:42:0f:30:22:95:d5:0c:aa:0c:07:9f:21:
         56:c4:a8:15:cf:b6:da:53:1a:30:66:49:e4:ed:d5:3b:0a:ce:
         37:4a:6e:d4:35:ed:31:06:ac:8b:48:cc:20:3b:ed:38:c2:9b:
         a7:4c:5a:06:ed:46:41:17:f8:84:fd:e4:cb:bf:18:0b:66:09:
         86:fe:79:69:d1:4c:fd:c1:69:e9:e1:60:8a:d2:1a:f4:83:5f:
         b3:9e:d6:b2:12:4f:5d:29:e9:d8:95:83:de:c0:19:50:f7:5a:
         fd:56:12:8d:e3:f5:5f:53:17:9f:90:0f:c8:c4:c1:90:92:99:
         7b:27:57:3e:90:80:d1:77:b7:62:2d:69:73:b4:4d:fc:1b:8c:
         a8:d4:ca:c6:38:b7:18:0e:b9:53:ca:aa:63:e1:9f:a8:fd:be:
         9e:fa:ea:64:42:bb:97:d1:a3:41:96:66:0d:18:9c:85:7c:77:
         0f:ca:29:b3:ee:d3:05:87:f6:82:e6:c7:ef:1f:0b:c4:00:a0:
         df:01:0d:84:41:d6:d9:18:20:98:0f:22:9d:74:be:25:47:05:
         91:74:b4:b9:6d:18:8e:d4:60:3b:41:bb:b0:5f:8d:dc:5d:11:
         56:c9:1a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----